/*
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */
package controller.user;

import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import model.fbSession;
import model.fbUser;
import model.pojo.User;

/**
 *
 * @author Yasith
 */
public class deleteUser extends HttpServlet {

    /** 
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {

        if (request.getSession().getAttribute("fbSession") != null) {

            fbSession fbs = (fbSession) request.getSession().getAttribute("fbSession");
            User u = null;
            try {
                u = fbUser.getUser(Integer.parseInt(request.getParameter("user")));
            } catch (NumberFormatException ex) {
            }

            if (u != null) {
                if (u.equals(fbs.getUser()) || fbUser.isAdmin(fbs.getUser())) {
                    if (fbUser.removeUser(u.getUserID())) {
                        if (u.equals(fbs.getUser())) {
                            request.getSession().setAttribute("fbSession", null);
                            request.setAttribute("message", "your user account " + u.getDisplayName() + " sucsessfuly removed");
                            request.setAttribute("returnToURL", "index.jsp");
                        } else {
                            request.setAttribute("message", "user account " + u.getDisplayName() + " sucsessfuly removed");
                            request.setAttribute("returnToURL", "getUserListing.do");
                        }
                    }
                }
            }
        }

        if (request.getAttribute("message") == null) {
            request.setAttribute("message", "you are not authorized to perform that action, so watch out!");
            request.setAttribute("returnToURL", "index.jsp");
        }

        request.getRequestDispatcher("message.jsp").forward(request, response);

    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /** 
     * Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     */
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     */
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Returns a short description of the servlet.
     */
    public String getServletInfo() {
        return "Short description";
    }// </editor-fold>
}
